Senior Cloud Security Engineer - Remote Work

BairesDev; United States; Remote; CLP 137,525,000 - 186,640,000; Full time

Benefits offered by this job

Remote work

USD pay

Home office setup

Flexible hours

Parental leave

Growth opportunities

Multicultural team

Job summary

BairesDev is seeking a Senior Cloud Security Engineer to design and maintain resilient AWS security architectures across multiple accounts, VPCs, and edge services. You’ll balance security posture with system reliability while tracing issues across network, infrastructure, and application boundaries.

You’ll lead IAM and identity governance initiatives, respond to cloud incidents, tune edge protections (WAF, Shield, CloudFront), and relentlessly optimize topology, routing, and load balancers.

Qualifications

• 7+ years in cloud security engineering.
• Strong AWS security architecture expertise (VPC, IAM, KMS).
• Proven production experience tuning edge protection (WAF, Shield, CloudFront).
• Experience in network topology assessment and optimization.
• Leadership in IAM and identity governance initiatives.
• Hands-on cloud incident response and forensics.
• Strong cross-layer troubleshooting and English proficiency.

Responsibilities

• Design and maintain AWS security architectures across accounts and edge services.
• Tune AWS edge protections (WAF, Shield, CloudFront) against threats.
• Optimize network topology, routing, and load balancer configurations.
• Lead IAM and identity governance initiatives, enforcing least privilege.
• Participate in and guide cloud incident response, including log analysis.
• Troubleshoot issues across network, infra, and app boundaries.

Skills

Cloud security engineering

AWS security architecture

WAF & CloudFront

IAM & identity governance

Incident response & forensics

Network troubleshooting

English proficiency

Job description

At BairesDev, we've been leading the way in technology projects for over 15 years. We deliver cutting-edge solutions to giants like Google and the most innovative startups in Silicon Valley.

Our diverse 4,000+ team, composed of the world's Top 1% of tech talent, works remotely on roles that drive significant impact worldwide.

When you apply for this position, you're taking the first step in a process that goes beyond the ordinary. We aim to align your passions and skills with our vacancies, setting you on a path to exceptional career development and success.

Senior Cloud Security Engineer at BairesDev

In this role, you'll design and maintain resilient AWS security architectures across multiple accounts, VPCs, clusters, and edge services, not just operate what someone else built. Tuning edge protection against real attack traffic and leading identity governance as a genuine initiative, you'll drive security decisions rather than execute tickets against them. This is your opportunity to work as an exceptional debugger and architect at once, tracing problems across network, infrastructure, and application boundaries while balancing security posture with system reliability.

What You'll Do:

• Design and maintain AWS security architecture across multiple accounts, VPCs, clusters, and edge services.
• Configure and tune AWS edge protection including WAF, WebACLs, Shield, and CloudFront against DDoS, bot traffic, and credential stuffing.
• Continuously assess and optimize network topology, routing, and load balancer configuration for both security and reliability.
• Lead IAM and identity governance initiatives, including least privilege enforcement, role hygiene, and secrets management.
• Participate in and guide cloud incident response, including log analysis, forensics, and remediation planning.
• Troubleshoot and debug issues across network, infrastructure, and application boundaries.

What we are looking for:

• 7+ years of experience in cloud security engineering.
• Strong expertise in AWS security architecture, including VPC networking, IAM, KMS, and secure workload design across multiple accounts and environments.
• Proven, production-level experience tuning AWS edge protection including WAF, WebACLs, Shield, and CloudFront under real attack traffic.
• Experience with network topology assessment and optimization, balancing security posture and system reliability.
• Proven experience leading IAM and identity governance initiatives, including least privilege enforcement, federation patterns, and secrets management.
• Hands-on experience with cloud incident response, including log analysis, forensics, and remediation planning.
• Strong cross-layer troubleshooting and debugging skills across network, infrastructure, and application layers.
• Advanced proficiency in English.

Nice to have:

• Experience with infrastructure scanning and IaC security review, including Terraform or CloudFormation policy review.
• Familiarity with governance and compliance frameworks such as SOC 2, ISO 27001, or NIST CSF.

How we do make your work (and your life) easier:

• 100% remote work (from anywhere).
• Excellent compensation in USD or your local currency if preferred
• Hardware and software setup for you to work from home.
• Flexible hours: create your own schedule.
• Paid parental leaves, vacations, and holidays.
• Innovative and multicultural work environment: collaborate and learn from the global Top 1% of talent.
• Supportive environment with mentorship, promotions, skill development, and diverse growth opportunities.